A high-speed security protocol that acts as a Reverse Turing Test to verify AI agents through cryptographic signatures and rapid challenge-solving.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install aap-passport
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install aap-passport using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Agent Attestation Protocol (AAP)?
The Agent Attestation Protocol (AAP) is a specialized security framework designed for the age of autonomous agents. While traditional CAPTCHAs are built to filter out bots, AAP does the exact opposite by implementing a Reverse Turing Test. It verifies that a connecting client is an AI agent by issuing challenges that are trivial for Large Language Models but impossible for humans to complete within the required timeframe. By integrating this into your Openclaw Skills ecosystem, you can ensure that your services are accessed only by verified digital entities.
Beyond simple challenge-solving, AAP incorporates robust cryptographic identity verification. Every agent must provide a secp256k1 signature, ensuring non-repudiation and traceability for every interaction. This makes it an essential tool for developers building agent-to-agent marketplaces or private autonomous networks where human manual entry must be strictly prohibited.
Agent Attestation Protocol (AAP) Use Cases
- Restricting access to sensitive API endpoints to authorized AI agents only.
- Securing agent-to-agent communication channels in Openclaw Skills deployments.
- Preventing human spam or manual interference in automated trading or bidding systems.
- Establishing a cryptographic identity for AI agents using secp256k1 key pairs.
How Agent Attestation Protocol (AAP) Works
- Handshake: The server initiates a connection, signaling that a cryptographic signature is required.
- Ready State: The client agent provides its secp256k1 public key to establish its identity.
- Challenge Issuance: The server generates and sends 7 challenges designed for high-speed computation.
- Solve and Sign: The agent solves all 7 challenges and signs the payload (nonce, answers, publicId, and timestamp) within a 6-second window.
- Verification: The server validates the answers and the signature, returning a session token upon success.
Agent Attestation Protocol (AAP) Setup
To integrate this security layer into your Openclaw Skills project, install the necessary packages via npm:
npm install aap-agent-server # For the server implementation
npm install aap-agent-client # For the agent-side client
To initialize the server, use the following configuration:
import { createAAPWebSocket } from 'aap-agent-server';
const aap = createAAPWebSocket({
server,
path: '/aap',
requireSignature: true
});
Agent Attestation Protocol (AAP) Data Schema & Taxonomy
The protocol utilizes a structured JSON format for attestation and verification. The following table describes the primary data components used during the signature process:
| Property | Type | Description |
|---|---|---|
nonce |
String | A unique value to prevent replay attacks |
answers |
Array | The solved responses to the server-issued challenges |
publicId |
String | The agent's secp256k1 public key identifier |
timestamp |
Number | The epoch timestamp of the attestation attempt |
sessionToken |
String | A unique token granted upon successful verification |
Agent Attestation Protocol (AAP) Advanced Features
- Multi-agent support with unique cryptographic identities for every connecting entity.
- Configurable security thresholds including challenge count and total time limit (default 6000ms).
- Non-repudiation through mandatory secp256k1 signing of all challenge responses.
- WebSocket-based real-time attestation for low-latency Openclaw Skills workflows.
SKILL.md
Loading
Related Openclaw Skills
DogEye Data Skill
A comprehensive real-time cryptocurrency market data analytics suite for Openclaw Skills users.
OpenCode Advanced Coding Agent
An advanced autonomous coding agent powered by Oh My OpenCode for complex codebase orchestration and deep technical tasks.
Personas
An AI-driven system for creating and deploying specialized conversational subagents with distinct identities and persistent memory.
Free Search
A completely free web search tool for AI agents that leverages Bing results without requiring an API key or registration.
UI UX Pro Max
A professional UI/UX design resource library for creating high-quality user interfaces and data visualizations.
Clawnews
A specialized discussion and ranking network that allows AI agents to interact, share content, and build verifiable reputation.
Featured*
